CryptoLocker Prevention Script for Kaseya
Script downloads utility called CryptoPrevent from FoolishIT.com, which when run blocks apps from running from %appdata%, %localappdata%, %programdata% and %userprofile% directories. Protects execution from the startup folder and recycle bin. It also blocks .exe files when opening inside a zip, rar, 7z files, opened from the %LocalTemp% directory. Script writes to script log if successful. XP Computers REQUIRE A REBOOT!
Blocking is based on best practices that have been discussed on multiple forums.
PLEASE carefully test this script, it BLOCKS applications from running in these directories and may impact good programs. We also have an UN-protect script in the event you need to reverse it.
(c) Copyright 2013 Network Depot, LLC (dba Virtual Administrator) ALL RIGHTS RESERVED. This script is the property of Network Depot, LLC (dba VirtualAdministrator), and use is restricted to active clients. Do not re-distribute without written authorization.
This script is provided “AS-IS”. Please make sure that you test this script in a controlled environment before deploying to a production environment. Please let us know if you run into any problems.